Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/3993f350-b756-4916-8d84-484f025dffcc/0/323430343a383030303a37303a3a2f34382d3438203d3e203137343531.roa
File:                     323430343a383030303a37303a3a2f34382d3438203d3e203137343531.roa (raw, json)
Hash identifier:          TG4JvUQ1qEoFn8nAVOa6qaocrb+C8QSFw591rRSWZnU=
Subject key identifier:   16:6C:A9:F3:1F:19:7E:97:B9:90:C5:08:59:DF:32:09:20:C2:60:3E
Certificate issuer:       /CN=AC555447BA62C39107F16BF572F82A417F728DBF
Certificate serial:       04946E9CD1A5A9141E3244B4C0839E6C477E4089
Authority key identifier: AC:55:54:47:BA:62:C3:91:07:F1:6B:F5:72:F8:2A:41:7F:72:8D:BF
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AC555447BA62C39107F16BF572F82A417F728DBF.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/3993f350-b756-4916-8d84-484f025dffcc/0/323430343a383030303a37303a3a2f34382d3438203d3e203137343531.roa
Signing time:             Thu 30 Sep 2021 00:00:06 +0000
ROA not before:           Wed 29 Sep 2021 23:55:06 +0000
ROA not after:            Fri 30 Sep 2022 00:00:06 +0000
asID:                     17451
IP address blocks:        2404:8000:70::/48 maxlen: 48

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            04:94:6e:9c:d1:a5:a9:14:1e:32:44:b4:c0:83:9e:6c:47:7e:40:89
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AC555447BA62C39107F16BF572F82A417F728DBF
        Validity
            Not Before: Sep 29 23:55:06 2021 GMT
            Not After : Sep 30 00:00:06 2022 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e4:6a:f3:25:e8:d0:fa:40:1d:a5:6e:5e:56:e8:
                    0b:12:a9:69:49:cf:3f:fd:3a:9e:fe:3d:b7:d7:f9:
                    d0:6b:62:8c:07:64:5d:02:dc:40:20:0c:05:70:d0:
                    ac:dd:fb:cc:53:30:40:cb:8a:c1:ba:d5:de:b1:3c:
                    77:63:81:69:1f:25:19:ff:1e:30:f2:8b:f1:b6:1f:
                    eb:ed:ec:a2:55:13:7a:3f:02:90:c1:56:13:15:ea:
                    b2:e4:5b:43:5c:9c:32:c1:84:59:4b:1d:d9:f2:3b:
                    19:58:8c:2e:25:b8:aa:a3:f4:9e:c7:44:9d:ea:0d:
                    f1:c7:10:22:61:a3:c2:a8:a3:b4:be:ac:de:de:88:
                    fd:cf:83:db:fa:bc:c6:d8:e4:75:1b:49:f6:b6:62:
                    0e:1a:77:f3:d9:90:3c:8a:39:ab:47:45:0e:83:5d:
                    c9:e6:cc:11:ea:9b:a6:a5:7e:0b:6a:4c:79:bc:15:
                    73:85:8f:d1:bc:d2:92:eb:d2:fc:c6:9e:95:cc:da:
                    be:7a:0d:db:3a:65:d6:35:68:cf:8d:48:84:79:dd:
                    9e:c6:e2:51:fa:a8:0f:ff:b7:17:86:cb:e1:79:51:
                    13:8a:f5:f1:d0:17:b6:fb:e2:b7:4c:ec:47:d6:ed:
                    fe:a0:68:ef:94:cf:6a:dd:b8:f1:7b:a8:a1:77:62:
                    07:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                16:6C:A9:F3:1F:19:7E:97:B9:90:C5:08:59:DF:32:09:20:C2:60:3E
            X509v3 Authority Key Identifier:
                keyid:AC:55:54:47:BA:62:C3:91:07:F1:6B:F5:72:F8:2A:41:7F:72:8D:BF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/3993f350-b756-4916-8d84-484f025dffcc/0/AC555447BA62C39107F16BF572F82A417F728DBF.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AC555447BA62C39107F16BF572F82A417F728DBF.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/3993f350-b756-4916-8d84-484f025dffcc/0/323430343a383030303a37303a3a2f34382d3438203d3e203137343531.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2404:8000:70::/48

    Signature Algorithm: sha256WithRSAEncryption
         45:00:11:b7:65:7a:8c:ec:73:e0:ab:62:5d:c5:ee:58:25:74:
         1a:4c:1d:e5:df:5f:8f:4a:98:7e:26:62:39:e6:25:12:44:34:
         32:2a:f9:66:65:91:b2:de:be:84:cb:9e:57:be:58:0e:61:88:
         46:eb:9d:4e:0a:7e:18:f2:60:8c:ff:04:2b:f5:a3:2b:38:db:
         c7:54:c0:5c:d4:55:97:4d:bd:fd:1c:b3:1e:fd:a2:a3:ff:ca:
         35:e4:8d:c9:0a:45:d9:09:95:24:76:db:6d:49:51:6d:45:b6:
         a8:b8:18:d5:7b:02:30:0f:59:b4:bb:33:f0:11:d2:c0:63:af:
         d9:90:fd:50:8e:e6:90:82:34:72:53:aa:03:8e:6d:7f:e5:55:
         fe:ee:54:43:01:68:8c:f5:b1:1a:a8:3b:ec:60:d5:c0:12:64:
         c7:79:89:52:d6:8a:f6:9e:de:bb:54:fa:18:d6:67:51:16:97:
         ce:1e:f9:89:40:61:bd:7e:00:02:ce:9f:94:0b:f1:f6:ca:e6:
         c5:a3:26:78:42:12:fd:1e:fa:84:cb:34:f2:34:6e:d8:5b:94:
         17:cd:04:66:2e:21:ad:04:1a:1f:a0:73:a4:d7:2b:1a:b0:40:
         1a:49:a3:01:e3:fe:ba:a0:95:e5:66:23:0f:6c:4b:12:c5:7a:
         fc:73:57:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----